# 27.79.41.251 — IP Intelligence Summary 27.79.41.251 is an IPv4 address operated by IRT-VNNIC-AP (AS7552), geolocated to Da Nang, Vietnam. Its reverse DNS name is localhost. As of August 29, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/27.79.41.251 - Last updated: 2026-08-29 ## Ownership - Organization: IRT-VNNIC-AP - Network name: VIETTEL-VN - Allocated block: 27.64.0.0/12 - ASN: AS7552 (https://ipdebrief.com/asn/7552) - Regional registry: APNIC ## Location - City: Da Nang - Region: Da Nang - Country: Vietnam - Time zone: Asia/Ho_Chi_Minh ## Network classification - Infrastructure type: — - Datacenter / hosting: no - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: Low Risk (25/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Reverse DNS - localhost - Forward-confirmed: no ## Analyst narrative \# IP Intelligence Briefing: 27.79.41.251/32 \## Executive Summary IP address 27.79.41.251 presents a low individual risk profile (Risk Score: 25) but operates within a subnet exhibiting elevated abuse density (0.032). Geographic inconsistencies between ownership registration and geolocation signals warrant monitoring. No direct threat indicators observed. \--- \## Risk Assessment \- **Overall Risk Score:** 25 (Low Risk) \- **Provider Score:** 0 \- **Authority Score:** 0 \- **Abuse Confidence Score:** Not available \- **Threat Classification:** Low Risk \- **Persistence Status:** Not persistently malicious (0 threat persistence days, 0 threat observations) \--- \## Ownership & Network Intelligence \- **ASN:** 7552 \- **Organization:** IRT-VNNIC-AP \- **Network Name:** VIETTEL-VN \- **RIR:** APNIC (Asia-Pacific) \- **CIDR Block:** 27.64.0.0/12 \- **BGP Prefix:** 27.79.40.0/21 \- **Route Stability:** Unstable (isRouteStable: false) \- **Operator Score:** 0.1304 (Minimal) \--- \## Geolocation Analysis **Significant Discrepancy Detected:** \- **Registered Ownership:** Vietnam (APNIC region, IRT-VNNIC-AP) \- **Geolocation Signals:** \- US (Boston, MA) - Multiple sources \- Vietnam (Da Nang, maxmind-geolite2-city) - Conflicting signal This geographic inconsistency suggests potential proxy usage, misconfigured infrastructure, or spoofed location data. \--- \## Threat Indicators \- **Blacklist Count:** 0 \- **Known Attacker:** No \- **Spam Source:** No \- **Tor Exit Node:** No \- **Vulnerability Scanner Activity:** 0 incidents \- **WAF Violations:** 0 \- **Honeypot Hits:** 0 \--- \## Network Services & DNS \- **Open Ports:** None detected \- **DNS Status:** \- PTR Hostnames: localhost \- Forward Resolution: localhost \- Forward Confirmed: No \- Forward Hostnames: localhost \- **Email Authentication:** No SPF, no DMARC records \- **Service Purpose:** Firewalled / No Services \--- \## Subnet Neighborhood Analysis (27.79.41.0/24) \- **Total Siblings:** 31 \- **Abuse Density:** 0.032 \- **Risk Distribution:** \- High Risk: 1 \- Medium Risk: 17 \- Low Risk: 13 **Notable High-Risk Neighbors:** | IP Address | Risk Score | Authority Score | |------------|------------|-----------------| | 27.79.41.196 | 80 | 50 | | 27.79.41.78 | 65 | 50 | | 27.79.41.136 | 65 | 50 | | 27.79.41.254 | 55 | 50 | The subnet demonstrates moderate abuse concentration. The target IP's risk score (25) is below the subnet median. \--- \## Historical Signal Analysis (13 Observations) Recent observations indicate: \- Vietnam-based ownership signals (IRT-VNNIC-AP, VIETTEL-VN) \- Mixed geolocation data (US and Vietnam signals) \- No escalating threat pattern \- No significant ownership changes \--- \## Relationships \- **Network Association:** VIETTEL-VN \- **DNS Associations:** localhost (multiple records) \--- \## Recommended Actions No specific firewall rules or mitigation actions recommended at this time. The IP presents low individual risk with no active threat indicators. However, the following considerations apply: 1. **Monitor Geographic Inconsistencies:** The discrepancy between APNIC-registered Vietnam ownership and US geolocation signals warrants periodic re-validation. 2. **Subnet Context:** Monitor the 27.79.41.0/24 subnet for elevated activity. One neighbor (27.79.41.196) shows high risk score (80). 3. **Baseline Establishment:** Continue monitoring for changes in geolocation consistency and threat signal accumulation. 4. **No Immediate Block:** Current risk profile does not warrant defensive blocking. Maintain observation status. \--- \## Conclusion IP 27.79.41.251 is a low-risk infrastructure endpoint with no active threat indicators. The primary intelligence concern is geographic signal inconsistency and subnet-level abuse density. No immediate action required; maintain baseline monitoring and watch for signal escalation. ## Nearby addresses - 27.79.41.12 (https://ipdebrief.com/27.79.41.12) - 27.79.41.18 (https://ipdebrief.com/27.79.41.18) - 27.79.41.23 (https://ipdebrief.com/27.79.41.23) - 27.79.41.32 (https://ipdebrief.com/27.79.41.32) - 27.79.41.44 (https://ipdebrief.com/27.79.41.44) - 27.79.41.45 (https://ipdebrief.com/27.79.41.45) - 27.79.41.47 (https://ipdebrief.com/27.79.41.47) - 27.79.41.68 (https://ipdebrief.com/27.79.41.68) - 27.79.41.73 (https://ipdebrief.com/27.79.41.73) - 27.79.41.76 (https://ipdebrief.com/27.79.41.76) - 27.79.41.78 (https://ipdebrief.com/27.79.41.78) - 27.79.41.91 (https://ipdebrief.com/27.79.41.91) --- Source: IPDebrief, "27.79.41.251 IP intelligence", https://ipdebrief.com/27.79.41.251, updated 2026-08-29. Assessments are probabilistic.